Overview
This case study has to do with login guessing. The correlation rule watches for multiple attempts of failed authentication to network and host services followed by a successful login attempt. Please explain how you would go about solving this problem.